We divide the requests we receive by the type of information requested: “content” or “non-content.”

Most content information on the Wikimedia projects is the public content of articles and project pages; “non-content” information refers to information such as IP addresses or user agent information. The distinction comes from the Electronic Communications Privacy Act, or ECPA. Please see our FAQ for more information.

Compared to other companies, we received relatively few requests, and granted relatively low percentages.*

* Due to the inconsistent release dates across different organizations, comparison data for the period covered by this report (July 2019–December 2019) was not available, so we are presenting the comparison data above for January 2019–June 2019. Please also note that figures for Wikimedia include additional types of requests for user data that are not included in the other organizations’ figures. See the FAQ for more details.

Informal government requests

We report two types of emergency disclosures, which happen on rare occasions.

First, the Electronic Communications Privacy Act provides an expedited process for law enforcement to request user data from websites in cases of immediate threat to life or limb. We call these "emergency requests". Such requests are also addressed in our Requests for User Information Procedures & Guidelines and Privacy Policy.

Second, we proactively contact the authorities when we become aware of troubling statements on the projects, such as suicide threats or bomb threats. We take these statements seriously and assess each one individually, contacting law enforcement as appropriate to help resolve the issue. We call these “voluntary disclosures”.

Voluntary disclosures

	Terrorist threats	6
	Suicide threats	3
	Individual threats	2

Emergency requests

Emergency requests

1

Correction

One additional voluntary disclosure from January-June 2019 was unintentionally omitted from our previous report, bringing the total voluntary disclosures from 22 to 23.

Occasionally, we receive a preservation request from the U.S. government under the Electronic Communications Privacy Act. A preservation request is an order to retain information that would otherwise be deleted, anonymized, or aggregated within 90 days, according to our Data Retention Guidelines. If we receive one of these requests, we are legally required to retain the specific information indicated. However, we will not turn this information over to the requesting party unless they subsequently follow our Requests for User Information Procedures & Guidelines, and obtain a legal order, such as a subpoena or warrant, for the information in question.

Here, we provide the number of new preservation requests we received during the period covered by this report.

Continue reading →